European Union: Ireland’s Data Protection Commission investigation into Meta over personal data transfers for its Facebook service

Progress

Current status
under appeal
13 Jun 2023 under appeal
12 May 2023 in force
13 Apr 2023 under investigation
28 Aug 2020 under deliberation

Scope

Implementers
Austria
Belgium
Bulgaria
Croatia
Cyprus
Czechia
Denmark
Estonia
Finland
France
Germany
Greece
Hungary
Ireland
Italy
Latvia
Lithuania
Luxembourg
Malta
Netherlands
Poland
Portugal
Romania
Slovakia
Slovenia
Spain
Sweden
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
platform intermediary: user-generated content
Government Branch
judiciary
executive
Government Body
court
data protection authority
Implementation Level
supranational

Timeline of events

13 Jun 2023
under appeal

Filed annulment action by Meta against EDPB’s binding decision on cross-border data transfers from the EU to the US

On 13 June 2023, Meta Platforms Ireland (Meta) filed an annulment action regarding the European Data Protection Board’s (EDPB) binding decision of 13 April 2023 concerning personal data transfers to the United States by Facebook. In particular, Meta…

Source
Event type investigation
Action type appeal
Government branch judiciary
Government body court
12 May 2023
in force

Issued DPC ruling in investigation into Meta over personal data transfers to US including an EUR 1.2 billion fine

On 12 May 2023, Ireland's Data Protection Commission (DPC) issued its ruling in the investigation into Meta over data personal data transfers to the United States for its Facebook service, issuing a fine of EUR 1.2 billion and requiring Meta to susp…

Source
Event type investigation
Action type ruling
Government branch executive
Government body data protection authority
13 Apr 2023
under investigation

Adopted EDPB binding decision on cross-border data transfers from the EU to the US by Meta (Facebook)

On 13 April 2023, the European Data Protection Board (EDPB) announced that it adopted a binding dispute resolution decision under Article 65 of the EU General Data Protection Regulation (GDPR) concerning a draft decision of the Irish Data Protection…

Source
Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority
28 Aug 2020
under deliberation

Announced Data Protection Commission investigation into Meta over personal data transfers for its Facebook service

On 28 August 2020, the Irish Data Protection Commission (DPC) opened an investigation into Meta over personal data transfers for its Facebook service. In particular, the DPC aims to investigate compliance with the General Data Protection Regulation …

Source
Event type investigation
Action type announcement
Government branch executive
Government body data protection authority